IBM How to include Rational Rhapsody external source files into configuration MakeFile - United States external; AddToMakefile; build; make; File element; MakeFile; external object; external objects; make file TECHNOTE (FAQ)

QUESTION
 How can you configure the default setting of IBM Rational Rhapsody Developer Edition for C++ (RiC++) in order to include external source files into MakeFile?

CAUSE
In some cases, you want to import legacy source files into Rhapsody models as external elements. For those externally imported elements (classes and files), Rhapsody doesn't generate code, hence you can preserve legacy code as part of your existing model. However, by default, Rhapsody excludes those external elements from the build even though you turn CG::File::AddToMakefile [File::AddToMakefile] property on.

ANSWER
For general information regarding code generation for external elements, see "Code generation for external elements [http://pic.dhe.ibm.com/infocenter/rhaphlp/v8/index.jsp?topic=%2Fcom.ibm.rhp.uml.diagrams.doc%2Ftopics%2Frhp_r_dm_cd_genrtion_extnl_elmts.html]" topic in Rhapsody Info Center. This technote will provide 3 solutions to allow the inclusion of external elements into the build.

Solution 1 - Use Component File element

 *
 *
 * Add source file to the build
 *

Solution 2 - Use File/Class element

 *
 *
 *
 *
 * Note:
 *
 *
 *
 *
 *  Add a Class/File element to map the external source code into the model. Set property CG::Class::UseAsExternal as "checked" for the added element. Set property CG::File::AddToMakefile [File::AddToMakefile] as "checked". Set the path to the external file in property CG::Class:FileName to make Rhapsody aware the location of the external source code. The path info would be used in MakeFile generated by Rhapsody.

   Note: Both absolute and relative path are supported. Right click the model element, from context menu, click Add New > SourceArtifact.

   Note: In order to include this external model element into MakeFile, SourceArtifact is required for the external model element. To enable the display of SourceArtifact, make sure Top Menu > View > Browser Display Options > Show Source Artifacts is checked.
   Make sure the type of added SourceArtifact is set either "Logical" or "Implementation" (DO NOT choose "Specification").
   Rename SourceArtifact with the name of the external source code (e.g. rename the element to "hoo", if the external file name is "hoo.cpp"). Click [Elements] tab of the SourceArtifact to make sure the model element is correctly mapped in SourceArtifact. In case of Class, the mapping will be done automatically. For File, manually add its parent element to [Elements] tab as below:

   [/support/docview.wss?uid=swg21621937&aid=1]

   IMPORTANT: You might occasionally find the behavior of File is not consistent with Class. This is because File element is designed to be used as external element only, and not supposed to be built from Rhapsody. You are encouraged to use external Class element in RiC++ model to avoid any confusion you might experience. Generate MakeFile to make sure the external source file (e.g. hoo.obj) file is being added in the build.

Solution 3 - Use Additional Sources setting

 *
 *
 * [Additional Sources]
 *
 * [Settings]
 *
 *

   Note:
 *

RELATED INFORMATION
#Code generation for external elements [http://pic.dhe.ibm.com/infocenter/rhaphlp/v8/index.jsp?topic=%2Fcom.ibm.rhp.uml.diagrams.doc%2Ftopics%2Frhp_r_dm_cd_genrtion_extnl_elmts.html]
Add source file to the biuld [http://pic.dhe.ibm.com/infocenter/rhaphlp/v8/topic/com.ibm.rhp.uml.diagrams.doc/topics/rhp_t_dm_adding_source_files_build.html?resultof=%22%61%64%64%22%20%22%73%6f%75%72%63%65%22%20%22%73%6f%75%72%63%22%20%22%66%69%6c%65%22%20%22%62%75%69%6c%64%22%20]

Question:
About implementation and specification in a File entry of type Logical under Component I use Rhapsody for C++ and want to add a .c/.h file combo.

I know I can easily do this by adding 2 File entries under the Component level: one being Implementation type and the other Specification. Then add the appropriate code in the respective Text Elements.

Alternatively I can do the equivalent by having a single File entry of type Logical that will generate 2 files (and change the CG:ImplementationExternsion property changed to .c).

However when the type is set to Logical, I don't know where to place the code for the Implementation and the code for the Specification so that they end up each in the right file. Right now, whatever I put in the Text Element ends up in both files.

Does anyone know how I can indicate Rhapsody that "this code is the implementation (.c)" and "this code is the specification (.h)"?

---

Rhapsody 8.0.5 for C++ on Windows

Answer: In some cases, you want to import legacy source files into Rhapsody models as external elements. For those externally imported elements (classes and files), Rhapsody doesn't generate code, hence you can preserve legacy code as part of your existing model. However, by default, Rhapsody excludes those external elements from the build even though you turn CG::File::AddToMakefile [File::AddToMakefile] property on.


IBM Security Bulletin: GNU C library (glibc) vulnerability affects IBM DataPower Gateway appliances (CVE-2015-0235) - United States  SECURITY BULLETIN

SUMMARY
 GNU C library (glibc) vulnerability that has been referred to as GHOST affects IBM DataPower Gateway appliances.

VULNERABILITY DETAILS
CVEID: [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235]CVE-2015-0235 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235]

DESCRIPTION:The gethostbyname functions of the GNU C Library (glibc) are vulnerable to a buffer overflow. By sending a specially crafted, but valid hostname argument, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the targeted process or cause the process to crash. This issue is being referred to as the "Ghost" vulnerability.

CVSS Base Score: 7.6
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/100386 [https://exchange.xforce.ibmcloud.com/vulnerabilities/100386]for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:C/I:C/A:C)

AFFECTED PRODUCTS AND VERSIONS
All DataPower versions through 6.0.0.11, 6.0.1.7, 7.0.0.4, 7.1.0.2

REMEDIATION/FIXES
Fix is available in versions 6.0.0.12, 6.0.1.8, 7.0.0.5, 7.1.0.3. Refer to APAR IT06941 [http://www-01.ibm.com/support/docview.wss?uid=swg1IT06941] for URLs to download the fix. Customers using DataPower firmware version 5.0.x, contact customer support.

IBM recommends that you review your entire environment to identify vulnerable releases of glibc including your Operating Systems and take appropriate mitigation and remediation actions. Please contact your Operating System provider for more information.

WORKAROUNDS AND MITIGATIONS
None known

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

ACKNOWLEDGEMENT
None

CHANGE HISTORY
 10 Feb 2015: Original Version Published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Where can I find more information about GNU C library (glibc) vulnerability affects IBM DataPower Gateway appliances (CVE-2015-0235)? I need to understand details regarding GNU C library (glibc) vulnerability affects IBM DataPower Gateway appliances (CVE-2015-0235).

Answer:
CVEID: [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235]CVE-2015-0235 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235]

DESCRIPTION:The gethostbyname functions of the GNU C Library (glibc) are vulnerable to a buffer overflow. By sending a specially crafted, but valid hostname argument, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the targeted process or cause the process to crash. This issue is being referred to as the "Ghost" vulnerability.

CVSS Base Score: 7.6
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/100386 [https://exchange.xforce.ibmcloud.com/vulnerabilities/100386]for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:C/I:C/A:C)


IBM Security Bulletin: Vulnerability in Apache Commons FileUpload affects IBM WebSphere Service Registry and Repository (CVE-2016-1000031) - United States  SECURITY BULLETIN

SUMMARY
 Vulnerability in Apache Commons FileUpload affects IBM WebSphere Service Registry and Repository (CVE-2016-1000031)

VULNERABILITY DETAILS
CVEID: CVE-2016-1000031 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000031]
DESCRIPTION: Apache Commons FileUpload, as used in certain products, could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileItem class of the FileUpload library. A remote attacker could exploit this vulnerability to execute arbitrary code under the context of the current process.
CVSS Base Score: 9.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/117957 [https://exchange.xforce.ibmcloud.com/vulnerabilities/117957] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

AFFECTED PRODUCTS AND VERSIONS
WebSphere Service Registry and Repository V8.5
WebSphere Service Registry and Repository V8.0

For unsupported versions IBM recommends upgrading to a fixed, supported version of the product

REMEDIATION/FIXES
To remediate CVE-2016-1000031 you need to apply fixes for both IBM WebSphere Application Server and IBM WebSphere Service Registry and Repository.

For WebSphere Application Server updates refer to this bulletin:
Security Bulletin: Security vulnerability in Apache Commons FileUpload used by WebSphere Application Server (CVE-2016-1000031) [http://www.ibm.com/support/docview.wss?uid=swg22011428]

For WebSphere Service Registry and Repository, this vulnerability has been fixed under APAR IJ01131. Fixes containing IJ01131 have been published and are available from Fix Central.

For WSRR V8.5

 * Apply V8.5.6.1_IJ01131 [https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FWebSphere+Service+Registry+and+Repository&fixids=8.5.6.1-WS-WSRR-MultiOS-IFIJ01131]

For WSRR V8.0  * Apply [http://www.ibm.com/support/fixcentral/swg/quickorder?parent=ibm%7EWebSphere&product=ibm/WebSphere/WebSphere+Service+Registry+and+Repository&function=fixId&fixids=8.0.0.3-WS-WSRR-MultiOS-IFIV65487_IV79085]V8.0.0.3_IV65487_IV79085_IV87422_IV87429_IV89477_IJ01131 [https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FWebSphere+Service+Registry+and+Repository&fixids=8.0.0.3-WS-WSRR-MultiOS-IFIV65487_IV79085_IV87422_IV87429_IV89477_IJ01131]

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

CHANGE HISTORY
 04 January 2018: Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Vulnerability in Apache Commons FileUpload affects WSRR (CVE-2016-1000031) I need to understand details regarding Security Bulletin: Vulnerability in Apache Commons FileUpload affects IBM WebSphere Service Registry and Repository (CVE-2016-1000031). Where can I find this information?

Answer:
CVEID: CVE-2016-1000031 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000031]
DESCRIPTION: Apache Commons FileUpload, as used in certain products, could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileItem class of the FileUpload library. A remote attacker could exploit this vulnerability to execute arbitrary code under the context of the current process.
CVSS Base Score: 9.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/117957 [https://exchange.xforce.ibmcloud.com/vulnerabilities/117957] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)


IBM Security Bulletin: A vulnerability in the GSKit component of IBM MQ Appliance (CVE-2016-0201) - United States  SECURITY BULLETIN

SUMMARY
 A vulnerability has been addressed in the GSKit component of IBM MQ Appliance

VULNERABILITY DETAILS
CVEID: CVE-2016-0201 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0201]
DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a MD5 collision. An attacker could exploit this vulnerability to obtain authentication credentials.
CVSS Base Score: 5.9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109310 [https://exchange.xforce.ibmcloud.com/vulnerabilities/109310] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM MQ Appliance M2000

REMEDIATION/FIXES
Apply the ifix for APAR IT13023 [http://www-933.ibm.com/support/fixcentral/swg/selectFix?product=ibm/WebSphere/IBM%20MQ%20Appliance%20M2000&fixids=8.0.0.4-IBM-MQ-Appliance-M2000-IT13223&function=fixId&parent=ibm/WebSphere].

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0] RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/PSIRT] IBM WebSphere MQ (CVE-2016-0201) http://www.ibm.com/support/docview.wss?uid=swg21974466 [http://www.ibm.com/support/docview.wss?uid=swg21974466] ACKNOWLEDGEMENT
None

CHANGE HISTORY
 26 January 2016 Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

PRODUCT ALIAS/SYNONYM
 IBMMQ

Question: Help with Security Bulletin: A vulnerability in the GSKit component of IBM MQ Appliance (CVE-2016-0201) I need to understand details regarding Security Bulletin: A vulnerability in the GSKit component of IBM MQ Appliance (CVE-2016-0201). Where can I find this information?

Answer:
CVEID: CVE-2016-0201 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0201]
DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a MD5 collision. An attacker could exploit this vulnerability to obtain authentication credentials.
CVSS Base Score: 5.9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109310 [https://exchange.xforce.ibmcloud.com/vulnerabilities/109310] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)


IBM Can't disable DASH TimeSet and dataRefresh in Events configuration - United States DASHL2; timeSet; dataRefresh; Events; WIdgets.; Pages TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Any Widget added to a Page after the initial "Save" or "Save and Exit" will not retain the Events settings when trying to disable the TimeSet and dataRefresh Events in the Edit -> Events pull down configuration window.

SYMPTOM
TimeSet and dataRefresh Events can't be disabled after any "Save" for previous added Widgets on a Page.

CAUSE
This has been identified as a product defect under APAR IV83442

ENVIRONMENT
Any DASH version, this was a problem since DASH 3.1.0

DIAGNOSING THE PROBLEM
Create a Page in DASH, add Widgets then save and exit. Access the Page again, edit the page to add another Widget, Edit the Events in the new Widget then unselect the TimeSet and dataRefresh options. Save the changes.

Edit the new Page:

[/support/docview.wss?uid=swg21984540&aid=1]

Unselect the TimeSet and dataRefresh options.

[/support/docview.wss?uid=swg21984540&aid=2]

After a "save" or "save and exit" you will see that they are enabled again.

[/support/docview.wss?uid=swg21984540&aid=3]

RESOLVING THE PROBLEM
Currently, the only workaround is to Place and configure the Events for all widgets wanted on the page before doing first "Save" or "Save and Exit". All widgets will retain values for subscribed events such as 'dataRefresh' and 'timeSet'

To use 'dataRefresh' and 'timeSet' properties of subscribed events for any widgets which are added after first "Save" or "Save and Exit", DASH support will need to be contacted.

Note: This issue is with the widgets which are placed on the page after first "Save" or "Save & Exit"

Question: Why the tick boxes in 'Subscibed Events' table remain ticked after saving the page When editing a widget and try to unsubscribe the event subscription for 'dataRefresh' events, the checkbox/tick for "dataRferesh" is still selected, even after saving the page.

Answer: This has been identified as a product defect under APAR IV83442


IBM Viewing Custodian Notes in Atlas Preservation Plan - United States Atlas Notes Preservation Plan TECHNOTE (FAQ)

QUESTION
 How do I view Custodian Notes in Atlas Preservation Plan?

CAUSE
When you click on the Notes tab in a Preservation Plan, you see a blank page without any notes listed

ANSWER
When you click on the Notes tab in a Preservation Plan it only lists the Plan Notes. Click the "Show Custodian Notes" button which lists the custodian notes. If you would like to go back to Plan Notes, click the "Show Plan Notes" button

Question: How do I view Custodian Notes in Atlas Preservation Plan? How do I view Custodian Notes in Atlas Preservation Plan?

Answer: When you click on the Notes tab in a Preservation Plan it only lists the Plan Notes. Click the "Show Custodian Notes" button which lists the custodian notes. If you would like to go back to Plan Notes, click the "Show Plan Notes" button


IBM SPSS Statistics 24.0 Fix Pack 2 - United States  DOWNLOADABLE FILES

ABSTRACT
 This Fix Pack will upgrade your SPSS Statistics 24.0 installation to SPSS Statistics 24.0 FP2 (24.0.0.2)

DOWNLOAD DESCRIPTION
This Fix Pack provides important product corrections for SPSS Statistics 24.0.

Issues Corrected and Release Note(s): Fix List [http://www.ibm.com/support/docview.wss?uid=swg27049686]

NOTE: The 24.0.0.2 Fix Pack contains all Interim Fixes made available for 24.0.0.0, as well as other corrected issues, and can be installed over any of the earlier Interim Fixes with no conflict.

PREREQUISITES
This Fix Pack is language independent but can only be installed over existing client and server installations of IBM SPSS Statistics 24.0.0.0

INSTALLATION INSTRUCTIONS

Installation Windows

 1. Log in as a local administrator.
 2. Download the Fix Pack to a temporary location on your hard drive.
 3. Ensure that no versions of Statistics are running.
 4. Run the Statistics 24.0.0.2 Fix Pack executable.
    Note: you must use "Run as Administrator" by first right-clicking on the executable.
 5. Statistics 24.0.0.2 is ready to run. Use the Help -> About menu to verify that 24.0.0.2 is now the installed version.

Guidelines for unattended/pushed installations for Windows-based clients: NOTE: This Fix Pack may require the machine to be rebooted to complete the installation. Please be aware that "pushing" the installation in unattended, silent mode may therefore force an unexpected machine reboot on a user, and schedule such installations accordingly.

The SPSS Statistics 24.0.0.2 for Windows Fix Pack obeys the same rules documented in the Site and Network License Administrator's Guides regarding "Extracting the Contents of a Downloaded Installer file" and "Pushing an Installation to Windows Computers".

In this case:

 1. Download the appropriate installer file to a temporary location on your hard drive.
 2. Open a command window as the local Administrator account and change directory to the temporary download location.
 3. Extract the "SPSSStatistics24.0.0.2Patch.msi" and locale-specific .mst file into a specified location from the downloaded FixPack installer file, "24.0-IM-S24STATC-<OS>-FP002.exe",using the documented "/b" switch: 24.0-IM-S24STATC-<OS>-FP002.exe /b"c:\Stats24002FixPack" (where <OS> is your operating system)
 4. You can then copy the two extracted files to a network share for easier distribution.
 5. Install the patch:

    msiexec /i "c:\Stats24002FixPack\SPSS_Statistics_24002_<OS>_Patch.msi" /qn /L*V "%temp%\SPSSStatistics24002PatchLog.txt" PYTHON_EXISTS="1" TRANSFORMS="c:\Stats24002FixPack\1033.mst"

    (where <OS> is the same operating system specification as in step 3)

Installation Mac

 1. Download and save the Statistics 24.0.0.2 Fix Pack to your local hard drive.
 2. Ensure that no versions of Statistics are running.
 3. Execute the Statistics 24.0.0.2 Fix Pack installer from the downloaded .dmg file.
 4. Statistics 24.0.0.2 is ready to run. Use the About Statistics 24 menu to verify that 24.0.0.2 is the installed version.

IBM SPSS Statistics 24 release is supported on Apple Macintosh OS X 10.10.x (Yosemite) through macOS 10.12.x (Sierra)

Guidelines for unattended/pushed installations for Macintosh-based clients:

IBM SPSS Statistics 24 FixPack 2 for Mac OS X has a silent (push) installer. To install this FixPack on Mac systems, do the following:

 1. Open the 24.0-IM-S24STATC-Mac-Silent-FP002.dmg disk image and copy the two files to your desktop (or any writable location).
 2. Open a Terminal window and change directories to the location of the patch installer and installer.properties file.
 3. Edit the installer.properties file to suit your needs. The USER_INSTALL_DIR parameter must be defined. For example, if the current SPSS Statistics 24 install is in the default /Applications/IBM/SPSS/Statistics/24, USER_INSTALL_DIR would be:
    USER_INSTALL_DIR=/Applications/IBM/SPSS/Statistics/24
 4. Uncomment and modify other parameters as needed.
 5. To execute the installer, use the following command:

    ./SPSS_Statistics_Installer_Silent.bin -f installer.properties

Installation Linux  1. Download the Fix Pack to a temporary location on your hard drive.
 2. Ensure that no versions of Statistics are running.
 3. Open a terminal window and execute the 24.0-IM-S24STATC-Linux8664-FP002.bin executable file as the ‘root’ user.
 4. Statistics 24.0.0.2 is ready to run. Use the Help -> About menu to verify that 24.0.0.2 is the installed version.

Guidelines for unattended/pushed installations for Linux-based clients: The SPSS Statistics 24.0.0.2 for Linux Fix Pack obeys the same rules documented in the Site and Network License Administrator's Guides regarding "Running a Silent Installation on Mac and Linux Computers".

Note: Please contact IBM SPSS Technical Support to obtain the appropriate installer.properties file for the Linux platform.

SPSS Statistics Server - 24.0 FP2 Installation Instructions

Installation Windows

 1. Log in as a local administrator.
 2. Download the Fix Pack contents to a temporary location.
 3. Ensure that the same version of Statistics Server is not running, as multiple versions can be installed on the server.
 4. Run the Statistics Server 24.0.02 Fix Pack executable.
    Note: you must use "Run as Administrator" by first right-clicking on the executable.
 5. SPSS Statistics Server 24.0.0.2 is ready to run. Check the service name or add/remove programs, or launch statisticsb and run the SHOW VERSION command to verify 24.0.0.2 as the installed version.

Installation UNIX/Linux Note: On UNIX and Linux, the Statistics Server upgrade is now a true incremental upgrade and not a complete, fresh installation. Installing the Fix Pack for the appropriate platform should be similar to the instructions for installing your server given in the SPSS Statistics Server Installation Instructions. It is suggested to copy off the spssdxcfg.ini prior to the installation on the UNIX / Linux server as the installation may remove the R section in spssdxcfg.ini and may require manual updating after FP2 installation

 1. Download the Fix Pack to a directory on the server machine.
 2. Shut down Statistics Server prior to applying the Fix Pack.
 3. You need to ensure the ownership and permissions for the /bin, /lib and /common subdirectories of the Statistics installation directory. For example, if you installed as root, to change the ownership and permissions, go to Statistics installation directory and run the following commands at the UNIX prompt:

    chown -R root:root bin lib commonchmod -R 777 bin lib common
 4. When running SPSS Statistics Server with internal authentication, a regular user can be the owner of these directories. Refer to the SPSS Statistics Server Administrator’s Guide for more information.
 5. The Fix Pack can be installed silently using the installer.properties file that comes with the 24.0 release (on the DVD): ./<installer_name> -f installer.properties where <installer_name> is the installer .bin file that you ftp'ed to the server.
 6. You can also execute the installer directly to launch a graphical version of the installer. (Note: You will need an X Window System to do so): ./<installer_name>
    Note for graphical installer: You should change the default installer directory for the patch in the Install Wizard to point it to the directory on the server where Statistics Server 24.0 is installed.
 7. Start the Statistics Server after the Fix Pack installation is complete.
 8. Run ./statisticsb and enter SHOW VERSION. The response should indicate 24.00.00.02

DOWNLOAD PACKAGE

Download RELEASE DATE LANGUAGE SIZE(Bytes) Download Options
What is Fix Central(FC)? [https://www.ibm.com/support/fixcentral/help?page=swfaqs] All packages 9 May 2017 Language Independent 1 FC [https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=all] [ ] IBM SPSS Statistics Server 24.0 zLinux Fix Pack 2 9 May 2017 Language Independent 642988 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATS-zLinux-FP002&includeRequisites=1&includeSupersedes=0&download] [ ] IBM SPSS Statistics Server 24.0 pLinux Fix Pack 2 9 May 2017 Language Independent 672373 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATS-pLinux-FP002&includeRequisites=1&includeSupersedes=0&download] [ ] IBM SPSS Statistics Server 24.0 Linux64 Fix Pack 2 9 May 2017 Language Independent 649871 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATS-Linux8664-FP002&includeRequisites=1&includeSupersedes=0&downl] [ ] IBM SPSS Statistics Server 24.0 Win64 Fix Pack 2 9 May 2017 Language Independent 519152 FC [https://www-933.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.0&platform=All&function=fixId&fixids=24.0-IM-S24STATS-WIN64-FP001&includeRequisites=1&includeSupersedes=0&downloadM] [ ] IBM SPSS Statistics Server 24.0 AIX Fix Pack 2 9 May 2017 Language Independent 726149 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATS-AIX-FP002&includeRequisites=1&includeSupersedes=0&downloadMet] [ ] IBM SPSS Statistics Client 24.0 Win64 Fix Pack 2 9 May 2017 Language Independent 732557 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATC-WIN64-FP002&includeRequisites=1&includeSupersedes=0&downloadM] [ ] IBM SPSS Statistics Client 24.0 Win32 Fix Pack 2 9 May 2017 Language Independent 706642 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATC-WIN32-FP002&includeRequisites=1&includeSupersedes=0&downloadM] [ ] IBM SPSS Statistics Client 24.0 Mac Fix Pack 2 9 May 2017 Language Independent 565780 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATC-Mac-FP002&includeRequisites=1&includeSupersedes=0&downloadMet] [ ] IBM SPSS Statistics Client 24.0 Mac Silent Fix Pac 9 May 2017 Language Independent 516867 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATC-Mac-Silent-FP002&includeRequisites=1&includeSupersedes=0&down] [ ] IBM SPSS Statistics Client 24.0 Linux64 Fix Pack 2 9 May 2017 Language Independent 651522 FC [https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=SPSS&product=ibm/Information+Management/SPSS+Statistics&release=24.0.0.1&platform=All&function=fixId&fixids=24.0-IM-S24STATC-Linux8664-FP002&includeRequisites=1&includeSupersedes=0&downl] [ ]

Question:
Where to download SPSS Statistics 24.0 Fix Pack 2

I found the pack from following link: https://www-01.ibm.com/support/docview.wss?uid=swg24043574

But where should I download it?

Answer:
Log in as a local administrator.
 2. Download the Fix Pack to a temporary location on your hard drive.
 3. Ensure that no versions of Statistics are running.
 4. Run the Statistics 24.0.0.2 Fix Pack executable.
    Note: you must use "Run as Administrator" by first right-clicking on the executable.
 5. Statistics 24.0.0.2 is ready to run. Use the Help -> About menu to verify that 24.0.0.2 is now the installed version.


IBM What happens if I run arssyscr -I instance_name -r  without having Report Distribution enabled or installed? - United States arssyscr; Report Distribution TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Running arssyscr -I instance_name -r during upgrade without RDF installed or enabled can lead to errors during load.

SYMPTOM
You will see errors similar to (depending on database brand)
DB Error: ORA-00942: table or view does not exist -- SQLSTATE=, SQLCODE=942, File=arsrddb.c,
Line=951 in your systemlog

CAUSE
Issuing the arssyscr -I (instance name) -r command will trigger arssockd to check for the ARSDBBUNDT (RDF tables), which do not exist.

DIAGNOSING THE PROBLEM
You will see the "table or view does not exist" errors in your Systemlog

RESOLVING THE PROBLEM
You will need to rename the Report Distribution tables and delete the Application, Application Group and Folders by performing the steps below:

You are going to want to change the Report Distribution table name:

This test is done on DB2, but It should be the same for (Oracle or SQL
Server).
That is [2] and [3], to rename to object name, you need to log on your
database command session:

[1] Shutdown arssockd

[2] Rename the Application Group name

c:\>db2 "select agid, name, agid_name from arsag where name = 'System
Report Distribution'"
AGID NAME
AGID_NAME
----------- ------------------------------------------------------------
---------
5007 System Report Distribution
SR
1 record(s) selected.

c:\>db2 "update arsag set name = 'System Report Distribution DELETE'
WHERE name = 'System Report Distribution'"
DB20000I The SQL command completed successfully.

[3] Rename the Folder name

c:\>db2 "select name from arsfol where name like 'System Report
Distribution%'"
NAME
------------------------------------------------------------
System Report Distribution - Bundles
System Report Distribution - Deliveries
System Report Distribution - Reports
3 record(s) selected.

c:\>db2 "update arsfol set name = 'System Report Distribution - Bundles
DELETE' where name = 'System Report Distribution - Bundles'"
DB20000I The SQL command completed successfully.

c:\>db2 "update arsfol set name = 'System Report Distribution -
Deliveries DELETE' where name = 'System Report Distribution -
Deliveries'"
DB20000I The SQL command completed successfully.

c:\>db2 "update arsfol set name = 'System Report Distribution - Reports
DELETE' where name = 'System Report Distribution - Reports'"
DB20000I The SQL command completed successfully.

[3] Start up arssockd

[4] Use the Admin GUI to delete the RD Application group, Applications,
and Folders

Question: What happens if I run arssyscr -I instance_name -r  without having Report Distribution enabled or installed? What could cause problems if I run arssyscr -I instance_name -r without having Report Distribution enabled or installed in CMOD v9.0?

Answer: Issuing the arssyscr -I (instance name) -r command will trigger arssockd to check for the ARSDBBUNDT (RDF tables), which do not exist.


IBM File Formats for IBM Content Collector (ICC) Content Search Services Support - United States icc; css; csss TECHNOTE (FAQ)

QUESTION
 How do I find list of all document formats supported by ICC Content Search Services Support (CSSS)?

ANSWER
Content Search Services uses Oracle Outside In Technology for text conversion. The Indexable document types depend on the version of the Oracle product that is used in Content Search Services in Content Platform Engine. The CSS V5.2.1 uses Outside In V8.4.1

You can reference this link to check what document types CSS/Outside In supports:

http://www-01.ibm.com/support/knowledgecenter/SSNW2F_5.2.1/com.ibm.p8.ce.admin.tasks.doc/cbr/csscbr_indexable_documenttype.htm?lang=en [http://www-01.ibm.com/support/knowledgecenter/SSNW2F_5.2.1/com.ibm.p8.ce.admin.tasks.doc/cbr/csscbr_indexable_documenttype.htm?lang=en]

Question: Where do I find list of all document formats indexable and supported by ICC Content Search Services Support (CSSS)? Where do I find list of all document formats indexable and supported by ICC Content Search Services Support (CSSS)?

Answer:
Content Search Services uses Oracle Outside In Technology for text conversion. The Indexable document types depend on the version of the Oracle product that is used in Content Search Services in Content Platform Engine. The CSS V5.2.1 uses Outside In V8.4.1

You can reference this link to check what document types CSS/Outside In supports:

http://www-01.ibm.com/support/knowledgecenter/SSNW2F_5.2.1/com.ibm.p8.ce.admin.tasks.doc/cbr/csscbr_indexable_documenttype.htm?lang=en


IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Image Construction and Composition Tool (CVE-2015-0410 and CVE-2014-6593) - United States  SECURITY BULLETIN

SUMMARY
 There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition Version 6 and 7 that are used by IBM Image Construction and Composition Tool. These issues were disclosed as part of the IBM Java SDK updates in January 2015.

VULNERABILITY DETAILS
CVEID: CVE-2015-0410 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410]
DESCRIPTION: An unspecified vulnerability related to the Security component could allow a remote attacker to cause a denial of service.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/100151 [https://exchange.xforce.ibmcloud.com/vulnerabilities/100151] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVEID: CVE-2014-6593 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593]
DESCRIPTION: An unspecified vulnerability related to the JSSE component has partial confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/100153 [https://exchange.xforce.ibmcloud.com/vulnerabilities/100153] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM Image Construction and Composition Tool v2.2.1.3
IBM Image Construction and Composition Tool v2.3.1.0
IBM Image Construction and Composition Tool v2.3.2.0

REMEDIATION/FIXES
The solution is to apply the following IBM Image Construction and Composition Tool version fixes.

Upgrade the IBM Image Construction and Composition Tool to the following fix levels:

 *  For IBM Image Construction and Composition Tool v2.2.1.3  * IBM Image Construction and Composition Tool v2.2.1.3 Build 28
      http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=1.1.0.5&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.2.1.3-28&includeSupersedes=0 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=1.1.0.5&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.2.1.3-28&includeSupersedes=0]

   For IBM Image Construction and Composition Tool v2.3.1.0  * IBM Image Construction and Composition Tool v2.3.1.0 Build 38
      http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.0.0.1&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.1.0-38&includeSupersedes=0 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.0.0.1&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.1.0-38&includeSupersedes=0]

   For IBM Image Construction and Composition Tool v2.3.2.0  * IBM Image Construction and Composition Tool v2.3.2.0 Build 12
      http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.1.0.0&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.2.0-12&includeSupersedes=0 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.1.0.0&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.2.0-12&includeSupersedes=0]

WORKAROUNDS AND MITIGATIONS
None

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

ACKNOWLEDGEMENT
None

CHANGE HISTORY
 21 July 2015: Original Version Published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Image Construction and Composition Tool (CVE-2015-0410 and CVE-2014-6593) I need to understand details regarding "Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Image Construction and Composition Tool (CVE-2015-0410 and CVE-2014-6593)." Where can I find  information regarding CVE-2014-6593?

Answer:
CVEID: CVE-2014-6593 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593]
DESCRIPTION: An unspecified vulnerability related to the JSSE component has partial confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/100153 [https://exchange.xforce.ibmcloud.com/vulnerabilities/100153] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)


IBM Using -Xgc:preferredHeapBase with -Xcompressedrefs - United States  TECHNOTE (FAQ)

QUESTION
 "Why does the JVM report a native out-of-memory (NOOM) when using compressed references? I am using a 64bit JVM and I clearly have plenty of memory left. How can I resolve this problem?"

CAUSE

*In this note, please refer to Java Versioning: Java Version.Release.ServiceRelease.FixPack
ex: Java 7.1.4.6 is the same as Java 7.1 SR4 FP6 is the same as Java 7 R1 SR4 FP6.
The IBM JVM will automatically use compressed references [http://publib.boulder.ibm.com/infocenter/javasdk/v6r0/topic/com.ibm.java.doc.diagnostics.60/diag/understanding/mm_compressed_references.html]when using a maximum heap size less than 25GB. This automated behavior was introduced in Java 6.1.5.0 and Java 7.0.4.0*. Compressed references (CR) decreases the size of Java objects making better use of available memory space. This better use of space results in improved JVM performance. *(Java 7.0.1.1 and later uses compressed references by default on z/OS)

See Introducing WebSphere Compressed Reference Technology [ftp://public.dhe.ibm.com/software/webserver/appserv/was/WAS_V7_64-bit_performance.pdf] for detailed information on how Compressed References work.

"When using compressed references, the size of the field used in the Java object for the Class Pointer and the Monitor/Lock is 32 bits instead of the 64bits that would be available in non-compressed mode. Because we are using 32 bits to store the location of these, and they are located in native (non-Java heap) memory, they must be allocated in the first 4GB of the address space - the maximum range we can address with the 32 bits." ~IBM Java Development Team

If the Java heap itself is small (-Xmx), the JVM may allocate it in the lower 4GB of address space along with the Class Pointers and Monitors/Locks. If these Class Pointers, Monitors/Locks and Java heap (if included) cannot fit in the lower 4GB, a native out of memory (NOOM) [http://www.ibm.com/developerworks/library/j-nativememory-linux/] will be thrown.
ANSWER
Why Use Compressed References?

Below the 4GB mark, the JVM does not have to perform any compression/decompression of the address pointer at runtime. Therefore, the best performance will be attained if the Class Pointers, Monitors/Locks and Java heap can all be contained comfortably within the lowest 4GB of the address space.

Determining Address Location of Java Heap Memory

To verify if the Java heap has memory regions below the 4GB mark, check the "Object Memory" section in the javacore:

Convert the "start" address from the hex value to a GB value [http://ss64.com/convert.html]. In the example below, 0x000000000F010000=0.23GB which is below the the 4GB (0x0000000100000000) mark.

 * [/support/docview.wss?uid=swg21660890&aid=1]

Setting the Preferred Heap Base with -Xgc:preferredHeapBase

Starting with Java 6.1.6.0 and Java 7.0.5.0, and later, the JVM will determine if the Java heap will fit comfortably in the lower 4GB. If it is too large, the JVM will automatically allocate the Java heap above the 4GB mark (APAR IV37797 [http://www-01.ibm.com/support/docview.wss?uid=swg1IV37797]).

NOTE: In IBM System z platforms (i.e. z/OS and z/Linux), automatic shift of the heap above the 4GB address space does NOT occur because on these platforms, there is an additional performance penalty
associated with higher shift values. To resolve Native OOM issues due to a shortage of heap memory in the lower region on z platforms, use -Xnocompressedrefs (see below).
See related: IBM Knowledge Center - JVMJ9GC089W [https://www.ibm.com/support/knowledgecenter/SSYKE2_7.0.0/com.ibm.java.messages/diag/appendixes/messages/j9gc/message_jvmj9gc089.html] However, in earlier Java 6.1 and Java 7.0 versions (earlier than Java 6.1.6.0 and Java 7.0.5.0), if the Java heap can not fit in the lower 4GB, a NOOM will occur. To avoid this problem, the generic JVM argument [http://www-01.ibm.com/support/docview.wss?uid=swg21417365] -Xgc:preferredHeapBase=<address> [http://publib.boulder.ibm.com/infocenter/javasdk/v6r0/topic/com.ibm.java.doc.diagnostics.60/diag/understanding/mm_compressed_references.html] can be used to ensure the Java heap is allocated above the 4GB address space. This will leave more room for the Class Pointer and Monitor/Lock memory.

 *
 *
 *
 *
 *
 *
 * This will locate the Java heap starting at the 4GB mark thus leaving the lower 4GB for the other processes.

Increase Maximum Heap Size to Force Heap Allocation Above the 4GB mark

Another way to ensure that the heap is allocated above the 4GB mark (Java 6.1.6.0 and Java 7.0.5.0 and later) is to set a maximum heap size equal to or greater than 4GB. For example -Xmx4G will ensure that the heap will have to be allocated above the 4GB mark. This will not work in earlier versions of the JVM since these earlier versions allowed the heap to straddle the 4GB mark, placing part of the memory above and some below (fixed as part of APAR IV37797) .

Further Investigation

If after setting -Xgc:preferredHeapBase=<address> or -Xmx4G a NOOM is still encountered (Java 6.1.6.0 and Java 7.0.5.0 and later), then further investigation is required at the application level. Look to decrease the size and usage of the applications Class Pointers and Monitors/Locks. Additionally, there are some WebSphere Application Server troubleshooting methods that may help reduce the native memory footprint. See: IBM Troubleshooting native memory issues [http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg21373312].

Reserving Low-Memory Space with -Xmcrs

If there is still free memory in the system when a Native OutOfMemory (NOOM) occurs, then the problem may be a shortage of memory in the low-memory region (under 4GB). Even if the Java heap is located above this boundary, other data associated with Java objects can be located in the low-memory region.

The OS memory allocator will deal out low-memory freely, thus memory resources in the lower boundary may run out. Later when the JVM tries to allocate memory for an artifact which is required to be allocated in low-memory (because the JVM has only reserved a 32bit pointer for it) it fails and throws an OutOfMemoryError.

Starting in Java 6.0.16.3, Java 6.1.8.3, Java 7.0.8.10, Java 7.1.2.10, there is a parameter -Xmcrs [http://www-01.ibm.com/support/knowledgecenter/SSYKE2_6.0.0/com.ibm.java.doc.diagnostics.60/diag/appendixes/cmdline/xmcrs.html] which allows the JVM to increase the amount of low memory it reserves on startup. With this setting, as long as the low-memory usage by the JVM does not exceed the -Xmcrs value, NOOM in the lower boundary will be avoided.

To set this parameter, first decide what a reasonable value for your lower memory requirements may be. Reasonable value is unique to each environment so there is not a general recommendation.

 * -Xmcrs<reasonable_value_for_lower_memory>

 *
 * NATIVEMEMINFO subcomponent dump routine
 *
 *
 *
 *
 *
 *
 *
 *
 * [/support/docview.wss?uid=swg21660890&aid=2]
 *

Disabling Compressed References with -Xnocompressedrefs As a last resort, if the native memory still can not be contained under the 4GB mark, you can set -Xnocompressedrefs [http://publib.boulder.ibm.com/infocenter/javasdk/v6r0/topic/com.ibm.java.doc.diagnostics.60/diag/appendixes/cmdline/Xnocompressedrefs.html] as a generic JVM argument. [http://www-01.ibm.com/support/docview.wss?uid=swg21417365] Using -Xnocompressedrefs will remove the use of compressed references and therefore remove the lower 4GB memory restriction on the Class Pointers and Monitors/Locks. This will however, result in a significant increase in Java heap memory requirements. It is not uncommon for 70% more heap space to be required. Due to the increased memory requirements it is strongly advised that the Java heap size is adjusted to a larger value and garbage collection is monitored and retuned as required.

Additionally, some benchmarks show a 10-20% relative throughput decrease when disabling compressed references: "Analysis shows that a 64-bit application without CR yields only 80-85% of 32-bit throughput but with CR yields 90-95%. Depending on application requirements, CR can improve performance up to 20% over standard 64-bit." See:ftp://public.dhe.ibm.com/software/webserver/appserv/was/WAS_V7_64-bit_performance.pdf [ftp://public.dhe.ibm.com/software/webserver/appserv/was/WAS_V7_64-bit_performance.pdf].

Before using -Xnocompressedrefs as a solution, first rule out the possibility of a native memory leak. Since using -Xnocompressedrefs will allow the the native memory to grow unbounded, a leak in native memory will lead to process size growth eventually leading to a process that needs to be paged out. The paging will incur performance overhead which will eventually lead to an unstable environment. Therefore careful consideration must be used when selecting -Xnocompressedrefs as a solution.

Memory Map Considerations

The below figure is a generalization of how the JVM handles addresses in each section of the memory map based on heap size and compressed references (CR). Please note that at each stage beyond having all of the Java memory contained below the 4GB mark, there will be performance consequences:

[/support/docview.wss?uid=swg21660890&aid=3]

No Compressed References Overhead using -Xnocompressedrefs
or
-Xmx > 25GB -increased memory footprint
-fewer/larger objects stored on heap leads to more frequent GC
-lower cache and translation look aside buffer (TLB) utilization [/support/docview.wss?uid=swg21660890&aid=4] Compressed References Overhead maximum heap address used by the Java JVM process is below 4GB none maximum heap address used by the Java JVM process is above 4GB but below 32GB compression/decompression of address pointers

Getting Assistance From IBM Support
If further assistance will be required from IBM WebSphere Support, please set the following -Xdump [http://publib.boulder.ibm.com/infocenter/javasdk/v6r0/topic/com.ibm.java.doc.diagnostics.60/diag/tools/dumpagents_syntax.html] parameters in the generic JVM arguments [http://www-01.ibm.com/support/docview.wss?uid=swg21417365]:
 *
 *
 *

Then restart the JVM and recreate the problem. Once the NOOM is encountered, process the resulting system core with jextract [http://www-01.ibm.com/support/docview.wss?uid=swg21577379]. Send the jextracted core file, heapdump, javacore, snap trace, systemOut.log, native_stderr.log, native_stdout.log and systemErr.log to IBM Support [http://www-01.ibm.com/support/docview.wss?uid=swg21153852] for further analysis.
RELATED INFORMATION
 Linux/Windows - Thanks for the memory [http://www.ibm.com/developerworks/library/j-nativememory-linux/]
AIX - Thanks for the Memory [http://www.ibm.com/developerworks/library/j-nativememory-aix/]
Introducing WebSphere Compressed Reference Technology [ftp://public.dhe.ibm.com/software/webserver/appserv/was/WAS_V7_64-bit_performance.pdf]
Compressed references [http://publib.boulder.ibm.com/infocenter/javasdk/v6r0/topic/com.ibm.java.doc.diagnostics.60/diag/understanding/mm_compressed_references.html]
IBM Java Compressed References and Native OOMs [https://www.ibm.com/developerworks/community/blogs/kevgrig/entry/ibm_java_compressed_references_and_native_ooms]

Question: Why may I receive: Dump Event "systhrow" (00040000) Detail "java/lang/OutOfMemoryError" "Failed to create thread: retVal -1073741830, errno 12" ? Why may I receive: Dump Event "systhrow" (00040000) Detail "java/lang/OutOfMemoryError" "Failed to create thread: retVal -1073741830, errno 12" ?

Answer:
"When using compressed references, the size of the field used in the Java object for the Class Pointer and the Monitor/Lock is 32 bits instead of the 64bits that would be available in non-compressed mode. Because we are using 32 bits to store the location of these, and they are located in native (non-Java heap) memory, they must be allocated in the first 4GB of the address space - the maximum range we can address with the 32 bits." ~IBM Java Development Team

If the Java heap itself is small (-Xmx), the JVM may allocate it in the lower 4GB of address space along with the Class Pointers and Monitors/Locks. If these Class Pointers, Monitors/Locks and Java heap (if included) cannot fit in the lower 4GB, a native out of memory (NOOM) [http://www.ibm.com/developerworks/library/j-nativememory-linux/] will be thrown.


IBM Configuring defaultRowPrefetch for an Oracle JDBC driver - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 The setting defaultRowPrefetch is used to help increase the performance of queries to Oracle databases and we sometimes find customers who want to enable this feature for Oracle database connections to increase the prefetched rows.

Oracle JDBC drivers have a feature built in as an extension that allows you to set the number of rows that are prefetched while the full result set is being formulated. This is to reduce the number of trips back and forth to the database.

SYMPTOM
If defaultRowPrefetch is set as a custom property on the datasource, this will not work as the defaultRowPrefetch is not a datasource property but a property on the connection itself .

CAUSE
defaultRowPrefetch is a property of the connection and not of the datasource

ENVIRONMENT
WebSphere Application Server using an Oracle JDBC driver

DIAGNOSING THE PROBLEM
Customer sets this property and does not see it work. This may result in longer times to getting the full result set and more round trips to the database.

RESOLVING THE PROBLEM
The Oracle defaultRowPrefetch can be set in an attempt to speed up queries to a database that return multiple rows. But, it cannot be set as a custom property in a datasource. Please see below:

The way to set this connection property is as follows:.

You cannot set defaultRowPrefetch as a JVM property. It would have to be named
oracle.jdbc.defaultRowPrefetch for that to work. You can only use this property
by loading it into a Properties object in the code and then calling
getConnection with the Properties object.

Question: How to set database specific custom properties in WebSphere Application Server? I am using Websphere Application Server (WAS) v8.5.x with Oracle 11.1 JDBC drivers and I want to set some oracle specific properties, when connecting to the database in Websphere Application Server. (specifically: defaultRowPrefetch). How to set such specific properties in Websphere Application Server?

Answer:
The way to set this connection property is as follows:.

You cannot set defaultRowPrefetch as a JVM property. It would have to be named
oracle.jdbc.defaultRowPrefetch for that to work. You can only use this property
by loading it into a Properties object in the code and then calling
getConnection with the Properties object.


IBM What are the supported Apple Macintosh Operating System Versions for IBM SPSS Statistics? - United States SPSS mac macintosh Apple Macintosh statistics OS supported version compatibility matrix leopard Snow Leopard Lion Mountain Lion 10.8 Mavericks 10.9 22 Yosemite 10.10 (Yosemite) el capitan 10.11 spss 24 Sierra 10.12 High Sierra 10.13 TECHNOTE (FAQ)

QUESTION
 I would like to know what are the supported Macintosh Operating system versions for IBM SPSS Statistics versions?

ANSWER
Please see the list below. It is strongly recommended to review the platform information on IBM Software Product Compatibility Reports [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity/index.jsp]. The installation of IBM SPSS Statistics software on Apple Macintosh OSX operating systems requires an Intel processor.

A) Apple Macintosh MacOS High Sierra (10.13)

Support for IBM SPSS Statistics 25 only. Please note that no other SPSS release will be officially supported on High Sierra, but older versions like SPSS Statistics 24 may run as well on High Sierra.

NOTE: There's a known issue with some of the earlier release of Mac High Sierra system (13.0 and 13.1 beta version).
The top menu of SPSS 25 may disappear if the Mac OS system is set to Non-English.
The official MacOSX 10.13.1 version do not have this issue. So, if you encountert this issue you need to update your Mac OS version to latest official 10.13.1 build from Apple.

B) Apple Macintosh MacOS Sierra (10.12)

Support for IBM SPSS Statistics 25 and IBM SPSS Statistics 24 only. For release 24 It is also recommended to install the latest FixPack 2 for release 24 on Mac [http://www-01.ibm.com/support/docview.wss?uid=swg24043574]. [http://www-01.ibm.com/support/docview.wss?uid=swg24042675]

No older SPSS Statistics releases are supported on Sierra.

C) Apple Macintosh OSX El Capitan (10.11)

Support for IBM SPSS Statistics 24. Please see the Release notes - IBM SPSS Statistics 24.0 [http://www-01.ibm.com/support/docview.wss?uid=swg27047057] for known issues on Macintosh.

Full documentation including installation material provided in different languages and manuals for release 24 can be found on IBM SPSS Statistics 24 Documentation [http://www-01.ibm.com/support/docview.wss?uid=swg27047033] webpage.

Also, Support for IBM SPSS Statistics 23. Note: if you want to install on El Capitan, please refer to technote 1970391 [http://www-01.ibm.com/support/docview.wss?uid=swg21970391]

D) Apple Macintosh OSX Yosemite (10.10)

Support for IBM SPSS Statistics 24, IBM SPSS Statistics 23 and IBM SPSS Statistics 22

Note: Mac OSX 10.10 (Yosemite) was released on Thursday, October 16th 2014 by Apple after Statistics 22 was released. If you like to use Statistics 22 on Yosemite you need to install Statistics 22 Fixpack 2 as well. Statistics 22 FixPack 2 and release Statistics 23 are fully tested on Yosemite OSX 10.10. So if you like to run Statistics 22 on Yosemite please install Statistics 22 FixPack 2 and also read the section below:

****

In some instances it can be necessary to re-install the legacy Apple Java 6 on 10.10 for the use of Statistics 22 FixPack 2 on this platform

Download and re-install Apple Java 6

- After you upgraded your Apple Mac OSX from a previous release to 10.10, Apple Java 6 may no longer exists on your upgraded system. If you then launch Statistics 22 which is an application that relies on Java 6, it can happen, the Mac OS pops up a dialog box stating Java 6 was requested, but none is present.
- The Java dialog has a "More Info" button, which when clicked opens a browser to an Apple Tech Support page for Apple Java 2014-001. A download link is provided:
http://support.apple.com/kb/dl1572 [http://support.apple.com/kb/dl1572]
- Click on the download link and a DMG containing the Java 6 installer is downloaded.
- Then you open the Java DMG, double click on the Java installer, follow the prompts and complete the installation of Java 6.

*******

E) Apple Macintosh OSC Mavericks (10.9)

Support for IBM SPSS Statistics 23 and IBM SPSS Statistics 22

***

Note: IBM SPSS Statistics 22 was developed and released prior to Apple's release of OS X 10.9 (Mavericks). However, Statistics 22 can be installed on Mac OSX 10.9 if you install Apple Java SE 6 (1.6.0_65) on OS X 10.9 first before you install Statistics 22. Please see http://support.apple.com/kb/dl1572 [http://support.apple.com/kb/dl1572] for download.

****

F) Apple Macintosh OSX Mountain Lion (10.8)

Support for IBM SPSS Statistics 22 and IBM SPSS Statistics 21

****

G) Apple Macintosh OSX Lion (10.7)

Support for IBM SPSS Statistics 21

H) Apple Macintosh OSX Snow Leopard (10.6)

Support for IBM SPSS Statistics 21

Older SPSS Statistics releases 18 and 19 and 20:

Please note that SPSS Statistics releases 18, 19 and 20 are no longer supported by IBM. Please contact IBM Sales department to renew your contracts.

RELATED INFORMATION
 Need more help? Our Statistics forum is Live! [https://developer.ibm.com/answers/topics/statistics.html?smartspace=predictive-analytics]

Question: What are the supported Macintosh Operating System versions for IBM SPSS Statistics 19, 20, 21, 22 and 23? I would like to know what are the supported Macintosh Operating system versions for IBM SPSS Statistics versions 18, 19, 20, 21, 22 and 23?

Answer: Please see the list below. It is strongly recommended to review the platform information on IBM Software Product Compatibility Reports [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity/index.jsp]. The installation of IBM SPSS Statistics software on Apple Macintosh OSX operating systems requires an Intel processor.


IBM DataType incorrect on Secondary - United States netcool; impact; netcool/impact; nci; data; type; datatype; .type; replication; cluster; sync; error; 500; mark; invalid TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 The DataType is not being correctly replicated across the ImpactServer Cluster

SYMPTOM
The .type file of the Secondary ImpactServer configuration is truncated with the error message:

 *
 *

CAUSE
APAR "IZ81446: IMPACT 511 CLUSTER UNABLE TO REPLICATE DATATYPES WITH USERPARMETERS VALUES IN EXCESS OF 16,000 CHARACTERS." [link below]

RESOLVING THE PROBLEM
Additional comments associated with APAR IZ81446 release notes:

"a new property is added to increase the file size limit:

 *

Add the property to $NCHOME/impact/etc/<SERVERNAME>_server.props file
where size limit can be 8192, 16384, 32768, etc.. "

The property would have to be added to all ImpactServers in the Cluster and would require a restart to enable - ensuring that the ImpactServer started as Primary had the correct, uncorrupted .type file to be replicated across the Cluster. Also ensure that there are no trailing white-space characters on the property as these invalidate properties in lower versions of Impact.

The APAR is not an issue in Impact 6 and 7, but one would still have to include this property with an appropriate value to handle a large character length for the USERPARAMETERS parameter.

The character length includes the whole USERPARAMETERS property name as well as the definition.

For example one would add the property:

 *

to the files:

 *
 *
 *

where one wished to allow the replication of a DataType between two ImpactServers called NCI1 and NCI2 in a Cluster where the USERPARMETERS property line were 20,000 characters long.
RELATED INFORMATION
 APAR IZ81446 [http://www-01.ibm.com/support/docview.wss?uid=swg1IZ81446]

Question:
Netcool/Impact (all versions): DataType incorrect on Secondary

The DataType is not being correctly replicated across the ImpactServer Cluster. The .type file of the Secondary ImpactServer configuration is truncated with the error message:

Error 500: Mark invalid

Answer:
"a new property is added to increase the file size limit:

 *

Add the property to $NCHOME/impact/etc/<SERVERNAME>_server.props file
where size limit can be 8192, 16384, 32768, etc.. "

The property would have to be added to all ImpactServers in the Cluster and would require a restart to enable - ensuring that the ImpactServer started as Primary had the correct, uncorrupted .type file to be replicated across the Cluster. Also ensure that there are no trailing white-space characters on the property as these invalidate properties in lower versions of Impact.


IBM Can an update query be run against the C&DS repository to update job results? - United States mass change query update results TECHNOTE (FAQ)

QUESTION
 We have jobs set up in SPSS Deployment Manager. We would like to do a mass change of the location set up on the location set on the location tab.

CAUSE
Currently all results are written to a specific file system and the server is full. We would like to change the location the results of the output.

ANSWER
The job data is stored as metadata. There is no query or batch process that can be run to do a mass update to change the location of your results tab. The recommendation is to work with your IT administrator to clean up your file system, point your file system to a new location or manually update all of your jobs

RELATED INFORMATION
 Need more help? Our C&DS forum is Live! [https://developer.ibm.com/answers/topics/collaboration.html?smartspace=predictive-analytics]

Question: Can an update query be run against the C&DS repository to update job results? We have jobs set up in SPSS Deployment Manager. We would like to do a mass change of the location set up on the location set on the location tab.

Answer: The job data is stored as metadata. There is no query or batch process that can be run to do a mass update to change the location of your results tab. The recommendation is to work with your IT administrator to clean up your file system, point your file system to a new location or manually update all of your jobs


IBM How do I change the default 'fit content by' behaviour of Daeja viewer in IBM Content Navigator, to fit content by height or width? - United States fit by height; fit by width; fit; default fit; Daeja viewer; FileNet viewer; Daeja; scale TECHNOTE (FAQ)

QUESTION
 How do I change the default 'fit content by' behaviour of Daeja viewer in IBM Content Navigator, to fit content by height or width?

ANSWER
In Content Navigator v2.0.2

In the ..navigator.war/applets/filenetViewer_properties.jsp file, set the value of the parameter 'scale' as follows

To fit content by width, specify - scale: "ftow",
To fit content by height, specify - scale: "ftoh",

Here's another way to modify the behaviour:

 * make the same changes above to the filenetViewer_properties.jsp under ECMClient\configure\explodedformat\navigator\applets folder.
 * Rebuild and redeploy the ear file.
 * Restart the application server

Save the changes and they should get picked up when the viewer is re-launched.

In Content Navigator v2.0.3

The same parameter-value pair mentioned above can be added in the Additional Settings section of the Daeja ViewONE panel, of the admin desktop. Add the parameter-value pair to the Additional Settings section of

 * the Professional tab for modifying the behaviour of the Daeja Professional viewer
 * the Virtual tab for modifying the behaviour of the Daeja Virtual viewer.

Click New in the Additional Settings section to add the parameter-value pair. Save the changes and they should get picked up when the viewer is re-launched.

Question: How do I change the default 'fit content by' behaviour of Daeja viewer in IBM Content Navigator, to fit content by height or width? How do I change the default 'fit content by' behaviour of Daeja viewer in IBM Content Navigator, to fit content by height or width?

Answer:
In Content Navigator v2.0.2

In the ..navigator.war/applets/filenetViewer_properties.jsp file, set the value of the parameter 'scale' as follows

To fit content by width, specify - scale: "ftow",
To fit content by height, specify - scale: "ftoh",

Here's another way to modify the behaviour:

 * make the same changes above to the filenetViewer_properties.jsp under ECMClient\configure\explodedformat\navigator\applets folder.
 * Rebuild and redeploy the ear file.
 * Restart the application server

Save the changes and they should get picked up when the viewer is re-launched.

In Content Navigator v2.0.3

The same parameter-value pair mentioned above can be added in the Additional Settings section of the Daeja ViewONE panel, of the admin desktop. Add the parameter-value pair to the Additional Settings section of

 * the Professional tab for modifying the behaviour of the Daeja Professional viewer
 * the Virtual tab for modifying the behaviour of the Daeja Virtual viewer.

Click New in the Additional Settings section to add the parameter-value pair. Save the changes and they should get picked up when the viewer is re-launched.


IBM Data Server Manager (DSM) showing SQLCODE=-206 "<name> is not valid in the context where it is used." - United States SQLCODE 206 -206 SQL0206 SQL0206N DSM incompatible db2level fixpack fix pack db2iupdt TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Data Server Manager log files are full of SQLCODE=-206 "<name> is not valid in the context where it
is used." error

SYMPTOM
The symptoms can vary depending on each installation.

Most common scenario, DSM shows Data Pending status for the monitored database.

CAUSE
When you apply a new DB2 fixpack, the db2iupdt command is used to update an instance to a higher level within a release.

But that command does not necessarily update the database system catalog to support the new fix pack that you have installed.
Meaning, just because the db2level shows a higher level, your database can still be using routines from an older DB2 level.

DIAGNOSING THE PROBLEM
One way to verify what routine levels your database is using, you can run the following DB2 command on the monitored database:

db2 "select versionnumber from sysibm.sysversions order by 1 desc"

If the results is showing a lower level than the ones DSM supports, that means your environment
is not supported, and you are getting the SQLCODE=-206 error.

To verify what are the DB2 levels supported by DSM, please refer to the links below:
- System requirements for IBM Data Server Manager, version 1.1.2 [http://www-01.ibm.com/support/docview.wss?uid=swg27045176]
- System requirements for IBM Data Server Manager, version 2.1 [http://www-01.ibm.com/support/docview.wss?uid=swg27048115]

RESOLVING THE PROBLEM
Run the db2updvnn command according to the db2level of your monitored database:

- For DB2 V9.7 run db2updv97 [https://www.ibm.com/support/knowledgecenter/SSEPGG_9.7.0/com.ibm.db2.luw.admin.cmd.doc/doc/r0054449.html] command
- For DB2 V10.1 run db2updv10 [https://www.ibm.com/support/knowledgecenter/SSEPGG_11.1.0/com.ibm.db2.luw.admin.cmd.doc/doc/r0054449.html] command
- For DB2 V10.5 run db2updv105 [https://www.ibm.com/support/knowledgecenter/SSEPGG_11.1.0/com.ibm.db2.luw.admin.cmd.doc/doc/r0054449.html] command
- For DB2 V11.1 run db2updv111 [https://www.ibm.com/support/knowledgecenter/SSEPGG_11.1.0/com.ibm.db2.luw.admin.cmd.doc/doc/r0054449.html] command

Question: Why does DSM error log have errors for SQLCODE=-206 errors reported for ISAS core warehouse database? Why does DSM error log have errors for SQLCODE=-206 errors reported for ISAS core warehouse database?

Answer:
When you apply a new DB2 fixpack, the db2iupdt command is used to update an instance to a higher level within a release.

But that command does not necessarily update the database system catalog to support the new fix pack that you have installed.